Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: hi6V9pMHqHYOTK9Y1peENkWJn5Tbx2t9ntZl3R55ouU=
Subject key identifier: B6:B8:8A:AA:26:AD:35:BC:23:6A:10:33:98:C8:14:35:DD:DC:56:ED
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01976D3DFC418E69A08EB1BA659C4EBB3EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0ADF
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: uumZWEAAqMEdrJbE0NLM8FvbtLMwLXAdjzIg9GKGurw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fc:41:8e:69:a0:8e:b1:ba:65:9c:4e:bb:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=b6b88aaa26ad35bc236a103398c81435dddc56ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:26:8e:e7:ac:c4:3c:b9:ff:e5:fd:4a:dd:49:
2a:a2:0e:4d:82:b3:8f:f3:f7:3f:dd:f1:f6:80:1d:
ee:4f:ee:7b:56:e3:55:55:10:01:53:1f:36:ce:d9:
c8:6b:7c:7d:32:98:f3:13:7e:19:17:99:ed:5a:27:
3a:37:8e:70:4c:67:8b:5c:f2:d0:49:f9:4f:e9:6f:
d5:01:57:07:60:74:88:18:17:be:ad:c0:15:f2:5c:
2d:dd:f0:7b:22:e3:9e:54:4b:22:b6:43:b3:49:3d:
02:86:b0:99:ee:13:a9:7e:2f:97:94:1b:3d:23:4c:
d1:60:79:3e:ef:4b:1b:b6:18:46:b9:6a:c6:cb:f4:
83:38:41:60:e7:8d:57:cb:6f:a9:5c:eb:d2:6a:a8:
4e:6a:20:03:28:dc:0b:8b:6a:d6:7e:c7:ef:f6:da:
4a:fe:1a:ed:a8:b3:1c:f6:49:cf:a6:5c:ed:76:5b:
4c:4e:59:81:dc:d6:8e:3b:94:36:3e:6f:a2:be:f0:
9c:c0:ab:33:60:5e:31:8d:10:5a:cd:a9:3e:95:5d:
ef:67:a4:bf:c8:8e:30:a5:2d:9b:7e:f7:3a:d3:aa:
80:57:1f:b9:16:f2:49:4d:de:f7:4a:92:40:cb:e7:
1e:3f:91:11:0d:58:44:e6:74:27:13:5c:24:eb:a5:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:8A:AA:26:AD:35:BC:23:6A:10:33:98:C8:14:35:DD:DC:56:ED
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:0d:44:d8:21:94:03:1b:ed:4c:fc:6f:5a:3d:2c:2b:54:
41:ea:39:a3:af:59:a0:dc:dc:f8:de:b5:b5:da:2d:75:59:6a:
0e:33:fb:78:ae:d8:a6:1f:ee:ee:0c:a3:6f:18:d2:5c:54:ab:
6d:0a:fc:d5:0e:12:b1:72:95:a8:57:1f:08:f1:1d:e5:53:65:
8e:d0:9e:71:81:e6:5a:e5:08:01:b3:bd:fb:29:54:79:6e:9e:
6c:48:7f:43:35:fc:69:0e:f1:e8:d3:17:aa:b9:6a:41:44:d7:
48:5b:c3:a4:3c:09:62:ba:fe:24:fa:48:82:12:6d:25:c6:e9:
4f:27:9b:93:f5:74:fb:d6:9e:1a:1f:6b:49:37:0c:41:6d:ec:
60:4f:5b:a2:79:bd:20:14:ee:a4:b7:00:fb:7d:5c:47:34:28:
a3:8d:dc:1e:8b:21:5f:81:36:da:e3:09:94:40:6c:b4:b4:ec:
6f:ae:56:90:3a:31:75:25:06:2f:e3:a1:aa:48:1a:fb:7d:24:
3b:9b:e2:f0:5f:ca:77:f6:f5:43:d2:25:80:48:ec:2f:81:b9:
10:78:86:4b:39:39:c8:56:0e:ce:b9:66:e4:7b:35:2d:bb:3a:
dd:78:29:6c:be:2f:c0:65:12:7a:9d:b7:db:88:23:66:5b:b7:
01:9a:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:31 2025 by rpki-client